EDB-50970

PoC

WSO2 Management Console (Multiple Products) - Unauthenticated Reflected Cross-Site Scripting (XSS)

view exploit source exploit_dbtype webappsauthor cxosmopublished 2022-06-27catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-29548US	medium6.1	41.1% (99th)	Exploit	2022-04-21
A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.